--TEST-- Disable XXE --SKIPIF-- = 80000) print "skip Not applicable for PHP 8+"; ?> --INI-- sp.configuration_file={PWD}/config/disable_xxe_disable.ini --EXTENSIONS-- simplexml --XFAIL-- --FILE-- ]> &foo; EOD; file_put_contents('content.xml', $xml); libxml_disable_entity_loader(true); $doc = simplexml_load_string($xml); printf("libxml_disable_entity to true: %s\n", $doc->testing); libxml_disable_entity_loader(false); $doc = simplexml_load_string($xml); printf("libxml_disable_entity to false: %s\n", $doc->testing); $xml = "foo"; file_put_contents('content.xml', $xml); $doc = simplexml_load_string($xml); printf("without xxe: %s", $doc->testing); ?> --EXPECT-- libxml_disable_entity to true: libxml_disable_entity to false: without xxe: foo